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Top Stories 

• A man pleaded guilty to running a massive mortgage fraud scheme in the Detroit area that 
cost lenders more than $100 million in losses. - Detroit Free Press (See item 5) 

• A United Airlines flight bound for Houston had to return to Phoenix Sky Harbor 
International Airport and make an emergency landing because of a cracked windshield. - 
Associated Press (See item 11) 

• The percent of contiguous U.S. land area experiencing exceptional drought in July reached 
the highest level in the history of the U.S. Drought Monitor. - Pork Network (See item 12) 

• The Kentucky Energy and Environment Cabinet July 6 announced a “water shortage 
watch” for 27 counties because drought conditions are threatening the availability of 
drinking water. - Evansville Courier & Press (See item 16) 

• A man engaged police in a shootout, stole a cruiser, and led officers on a chase in Prince 
George’s County, Maryland, that damaged many other cruisers and shut down a major area 
road. - WRC 4 Washington, D.C. (See item 23) 

• Search crews were looking for survivors among the hundreds of people visiting Great 
Smoky National Park in Tennessee after severe thunderstorms swept through the area 
killing two, injuring eight, and closing 40 miles of roads. - CNN (See item 39) 
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Energy Sector 

1. July 6, Associated Press - (West Virginia) W.Va.’s hilly terrain slows power 
restoration. The heavily forested mountains in West Virginia were slowing thousands 
of workers trying to restore electricity to more than 229,000 customers who remained 
in the dark 6 days after a storm tore across the state. At the same time, the State has 
been in a dynamic weather system, with almost daily thunderstorms that knock out 
customers in areas that were either already restored or that did not lose power after the 
first storm. The Charleston Gazette reported about 20,000 lost power in midday storms 
July 5. As of July 5, about 152,300 Appalachian Power customers and 77,300 
FirstEnergy customers were still without electricity. 

Source: http://www.mariettatimes.com/page/content.detail/id/246722/W-Va--s-hilly- 
terrain-slows-power-restoration-.html?isap=l&nav=5019 

2. July 6, Scranton Times-Tribune - (Pennsylvania) Acid spill reported in Leroy 
Twp. The Pennsylvania State Department of Environmental Protection (DEP) 
confirmed July 5 it is overseeing the cleanup of a 4,700-gallon hydrochloric acid spill 
that occurred July 4 at a Chief Oil & Gas well pad in Bradford County. The DEP said 
the incident caused a minor fish kill in a small tributary to Towanda Creek. The cause 
of the spill appeared to be related to valve failure on a tank holding the acid but remains 
under investigation, according to a news release from the community relations 
coordinator with the DEP. He said dams were constructed in the tributary before any 
acid reached the creek. The agency sent two emergency response team mebers to the 
site. DEP Oil and Gas and Environmental Cleanup program staff were on site 
collecting soil and water samples. 

Source: http://thetimes-tribune.com/news/acid-spill-reported-in-lerov-twp-l.1339757 

3. July 5, Associated Press - (Texas) 1 dead, 2 hurt in East Texas gas well 
accident. One person was killed and two others were injured in an accident at an East 
Texas gas well site. According to a statement from the Nacogdoches County Sheriff’s 
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Office, the accident happened July 5 near Chireno, about 170 miles southeast of Dallas. 
Witnesses told deputies the end cap came off the water line, hitting the three with 
highly pressurized water. A sheriff said the flying cap hit and killed one man. The two 
injured men were taken to a hospital, where one was treated and released. 

Source: http://www.star-telegram.com/2012/07/05/4081247/l-dead-2-hurt-in-east- 
texas-gas.html 



[ Return to top ] 

Chemical Industry Sector 

4. July 6, Associated Press - (Michigan) Part of M-14 reopens after acid 

spill. Authorities said a truck hauling acid rolled over in the Ann Arbor, Michigan area, 
prompting a response by hazardous materials crews and closing portions of a highway 
July 6. The crash on westbound M-14 closed the highway in both directions as 
hazardous material crews worked to clean up the spill, prompting traffic backups. The 
Washtenaw County Sheriffs Department said that southbound U.S.-23 to eastbound 
M-14 and eastbound M-14 reopened after being closed for many hours. Early the 
afternoon of July 6, police did not have an estimate on when westbound M14 would 
reopen. WHMI 93.5 FM Howell and WWJ 950 AM Detroit report the driver was taken 
to a hospital following the crash with shoulder and ankle injuries. 

Source: http ://w w w .freep ■com/article/20 1 207 06/NEWS05/ 1 207 060 1 9/hazardous- 
material-accident-M-14-U-S-23?odyssev=tabltopnewsltextlFRONTPAGE 

For another story, see item 2 
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Nuclear Reactors, Materials and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Banking and Finance Sector 



5. July 6, Detroit Free Press - (Michigan) Fenton man pleads guilty in $100-million 
mortgage scheme. A man pleaded guilty July 5 to running a massive mortgage fraud 
scheme in the Detroit area that cost lenders more than $100 million in losses. The U.S. 
attorney’s office said the ringleader ran a nearly 4-year scheme with 8 others that 
involved more than 500 fraudulent mortgage loans, more than 100 straw buyers, and 
roughly 180 residential properties in metro Detroit. The properties were used as, or 
falsely portrayed as, collateral for the loans, most of which went into default and 
foreclosure, authorities said. The loans ranged from $350,000 to $600,000, triggering 
more than $100 million in losses to the lenders. 

Source: http ://w w w .freep .com/article/20 1 207 06/NEWS06/207 060407/Fenton-man- 

pleads-guihv-in-36-100-million-mortgage- 

scheme?odyssev=modlnewswellltextlFRONTPAGEIs 

6. July 5, Columbus Republic - (Indiana) Man indicted in $10 million bank fraud. A 
Columbus, Indiana man accused of defrauding Indiana banks of more than $10 million 
was indicted on 13 federal charges of bank and wire fraud, The Columbus Republic 
reported July 5. A grand jury indicted him on charges including 10 counts of bank 
fraud and three counts of wire fraud. The indictment alleges the man, the president and 
manager of Seymour-based Van Natta Asset Management LLC and a variety of related 
companies, devised a scheme to defraud financial institutions to obtain large sums of 
money for 2 years beginning in March 2007. He allegedly prepared and submitted 
numerous false documents to banks throughout central and southern Indiana, including 
financial institutions headquartered in Bartholomew, Decatur, Washington, Morgan, 
and Monroe counties. The false documents included fraudulently created tax returns 
that hid the true income and financial affairs of his family members, according to the 
U.S. attorney’s office. 

Source: http://www.wishtv.com/dpp/news/crime/man-indicted-in-10-million-bank- 
fraud 



7. July 5, Federal Bureau of Investigation - (National) Three plead guilty in $41M 
video advertisement scheme based in Ventura County. Two residents of Oxnard, 
California, and a South Carolina man each pleaded guilty July 5 to federal fraud 
charges, admitting they participated in a $41 million investment scheme that victimized 
hundreds of investors across the United States. Using Ventura County, California 
companies called Unlimited Cash Inc. (UCI) and Douglas Network Enterprises Inc. 
(DNE), the defendants told victims that UCI would sell ATMs and “Ad Toppers” — 
computer monitors capable of displaying video advertisements — and DNE would 
place the devices in commercial locations that would generate income. Victims were 
told they would earn income from ATM transaction fees and advertisement revenue 
generated by Ad Toppers. Even though they took in about $41 million over a 4- year 
period, the defendants did not place most of the ATMs and Ad Toppers sold to 
investors. The loss amount to victims was about $27 million. 

Source: http://www.loansafe.org/three-plead-giiilty-in-41m-video-advertisement- 
scheme-based-in-ventura-county 
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Transportation Sector 

8. July 6, WSAU 550AM Wausau - (Wisconsin) Feds investigate Oshkosh crane 
collapse. Federal workplace safety officials were investigating the collapse of a crane 
on an expressway bridge near Oshkosh, Wisconsin, that killed a worker and injured 
another July 5. An employee of Spancrete was killed. Authorities said another worker 
was taken to a hospital with serious injuries. The mishap occurred on the Highway 41 
bridge over Lake Butte des Morts, just north of Oshkosh. Wisconsin Department of 
Transportation officials said the crane was lifting a beam when it collapsed. The project 
is part of an effort to upgrade Highway 41 to federal standards, for a possible future 
designation as an Interstate highway between Milwaukee and Green Bay. 

Source: http://whbl.com/news/articles/2012/iul/06/feds-investigate-oshkosh-crane- 
collapse/ 

9. July 6, Associated Press - (Wisconsin) More cases of pavement buckling on Wis. 
roadways. There are more cases of pavement buckling on Wisconsin roadways 
because of the extreme heat. The Wisconsin State Patrol said the pavement buckled 
July 5 on Interstate 90 westbound near Madison; on Interstate 39 northbound near 
Portage; on State Highway 51 near Monona; on State Highway 12 near Wisconsin 
Dells; and on State Highway 151 near Sun Prairie. The Beloit Daily News reported 
repair crews were sent and all traffic delays were cleared up by the evening. According 
to the National Weather Service, Madison hit 104 degrees and Milwaukee hit 103 
degrees July 5 — both highs were the third hottest ever for those cities. The service 
issued an excessive heat warning for all of Wisconsin except the northern part through 
late July 6. 

Source: http://www.wqow.com/storv/18964210/more-cases-of-pavement-buckling-on- 
wis-roadways 

10. July 6, Dekalb Daily Chronicle - (Illinois) Man charged with stealing from 
railroad. DeKalb County, Illinois police arrested a man they believe to have stolen 
more than $10,000 from the railroad on Suydam Road. The man, of Aurora, was 
charged July 5 with theft exceeding $10,000 and criminal trespassing to a railroad. The 
theft charges are punishable by up to 7 years in prison and a $25,000 fine. Trespassing 
at a railroad is punishable by up to a month in jail and a $1,500 fine. The incident is 
reported to have occurred May 6, although the man is believed to have trespassed at 
least three times, police said. Stolen items included railroad material and steel. 

Source: http://www.dailv-chronicle.com/2012/07/05/man-charged-with-stealing-from- 
railroad/a!53ef2/ 

11. July 5, Associated Press - (Arizona) Windshield crack forces flight to return to 
Ariz. A United Airlines flight bound for Houston had to return to Phoenix Sky Harbor 
International Airport in Phoenix because of a cracked windshield. Federal Aviation 
Administration (FAA) officials said the pilot declared an emergency and Flight 1138 
landed without incident at Sky Harbor July 5. It was not immediately clear how long 
the Boeing 737 had been in flight before the windshield cracked. 
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Source: http://www.cbsnews.com/8301-5Q1363 162-57467269/windshield-crack- 
forces-flight-to-retum-to-ariz/ 



For more stories, see items 4, 19, 23, and 39 
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Postal and Shipping Sector 

Nothing to report 
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Agriculture and Food Sector 

12. July 6, Pork Network - (National) U.S. drought expands, intensifies. The U.S. 
Drought Monitor report issued July 5 confirmed what most have suspected: the 
drought, now covering up to half the nation, is expanding and intensifying. The percent 
of contiguous U.S. land area experiencing exceptional drought in July reached the 
highest levels in the history of the U.S. Drought Monitor, said an official at the 
National Drought Mitigation Center at the University of Nebraska- Lincoln. Nearly 12 
percent of the contiguous United States fell into the “exceptional” classification, 
according to the report. Eighteen percent of the country is classified as under either 
extreme or exceptional drought, said a University of Nebraska assistant geoscientist. 
The extreme dry, hot conditions in the nation’s mid-section are driving up corn and 
soybean prices to record or near-record levels. The latest drought report featured the 
expansion and intensification of dryness in large sections of the country, with only 
southern Texas reporting some improvement. The dryness was beginning to take a 
significant toll on some of the nation’s crops, pastures, and rangelands. In the primary 
growing States for com and soybeans (18 each), 22 percent of the crop is in poor or 
very poor condition, as are 43 percent of the pastures and rangelands, and 24 percent of 
the sorghum crop. 

Source: http://www.agprofessional.com/news/US-drought-expands-intensifies- 
161473755.html 



13. July 6, CBC News - (International) Food inspection agency quarantines salmon 
farm. The Canadian Food Inspection Agency quarantined an aquaculture facility on the 
south coast of Newfoundland, CBC News reported July 6. An outbreak of infectious 
salmon anaemia or ISA was suspected in a salmon aquaculture pen in the St. Alban’s 
area. The executive director of the Newfoundland and Labrador Aquaculture Industry 
Association said provincial veterinarians found evidence of the virus during routine 
testing at the site. The disease does not affect human health or food safety, but it does 
pose a risk to aquatic animal health. The executive director added the aquaculture pen 
in question was quarantined to minimize the risk of spreading the virus. She noted this 
is the first time an aquaculture facility has been quarantined in Newfoundland and 
Labrador. If ISA is confirmed, the agency may take further action. 
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Source: http://www.cbc.ca/news/canada/newfoundland-labrador/story/2012/07/05/nl- 
salmon-farm-shut-down-705.html 



14. July 5, AgAnswers - (Indiana) Drought season highlights damage caused by 
nematodes. The drought throughout Indiana was intensifying nematode damage in 
farm fields, said a Purdue Extension nematologist, AgAnswers reported July 5. The 
needle nematode, soybean cyst nematode, and lance nematode all were causing more 
problems for grain farmers in a year when crops already are stressed by extreme heat 
and lack of rain. The nematologist said nematodes, microscopic roundworms, can be 
found in fields every year, but the damage is worse during a drought season. The needle 
nematode exclusively feeds on corn and grasses and is found in sandy soils. The lance 
nematode is found in corn and soybean fields. The soybean cyst nematode attacks 
soybean plants and causes the plant to become yellow and stunted. 

Source: http://www.agprofessional.com/news/Drought-season-highlights-damage- 
caused-b y- nematodes- 161 426 1 05 .html 



15. July 5, KFDl 101.3 FM Wichita - (Kansas) Drought conditions continue for 
Kansas. As the dry, windy heat wave continued to pound on Kansas, the governor 
updated his Drought Declaration, KFDI 101.3 FM Wichita reported July 5. The update 
included all 105 counties. Sedgwick County, as well as surrounding Butler, Harvey, 
Reno, Kingman, Harper, and Sumner, were among 55 counties included in the drought 
warning. Cowley County was 1 of 14 in watch status. In all, 36 counties have received 
emergency status. 

Source: http://www.kfdi.com/news/local/161471705.html 
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Water Sector 



16. July 6, Evansville Courier & Press - (Kentucky) Kentucky issues ‘water shortage 
watch’ for 27 counties. The Kentucky Energy and Environment Cabinet July 6 
announced a “water shortage watch” for 27 counties in the commonwealth, including 
Webster and Crittenden counties. According to a news release issued by the agency, 
such a watch is issued when “drought conditions have the potential to threaten the 
normal availability of drinking water supply sources. Officials at the Kentucky 
Division of Water study rainfall amounts, reservoir levels, streamflows, the Palmer 
Drought Index and the Drought Monitor when determining drought status,” the news 
release stated. Most of Western Kentucky is in an extreme drought, with some areas 
more than a foot of rain below the annual average. The agency said counties listed in 
the watch should “be prepared to reduce water use upon request by their local water 
supplier.” 

Source: http://www.courierpress.com/news/2012/iul/06/kentucky-issues-water- 
shortage-watch-27 -counties/ 

17. July 5, Newark Star-Ledger - (New Jersey) Outdoor water ban lifted for some 
Monmouth County residents. A ban on outdoor watering in Monmouth County, New 
Jersey was lifted for all residents who are not customers of New Jersey American 
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Water, authorities said July 5. The change means many county residents can resume 
watering their lawns, topping off their swimming pools, and washing cars. But for 
anyone connected to the American Water system, which lost some pressure the week of 
June 25 after three major pipelines broke at the Swimming River Reservoir treatment 
plant in Middletown, such restrictions remain in place for the time being. American 
Water installed a new, 36-inch pipeline to draw water from the reservoir into its 
treatment plant, said a spokesman for the company. A new 24-inch pipeline went into 
operation July 5 and was being used to pump treated water out to customers. A second 
24-inch pipe, which is still being assembled, will have the same purpose. At that time, 
the company will re-assess whether the outdoor watering ban can be lifted for its 
customers, the spokesman said. The water woes began June 29 when three large 
pipelines in Middletown were severed by the partial collapse of an aging, wooden 
bridge that held them up. Police were issuing warnings to anyone in violation of the 
watering ban. 

Source: 

http://www.ni.com/news/index.ssf/2012/07/outdoor water ban lifted for s.html 

18. July 5, Minnesota Public Radio - (Minnesota) Broken pipe spews sewage into 
river. Utility officials said up to 700,000 gallons of sewage spewed into the Mississippi 
River when a sewer pipe broke in Sauk Rapids, Minnesota, July 4. The city’s utility 
department had to divert the sewage into the river in order to make repairs. Crews fixed 
the pipe by July 4 night. Sauk Rapids is in central Minnesota, just upriver from the city 
of St. Cloud’s water intake pipes. Utility officials there said the sewage appeared to be 
well-diluted, but the city increased treatment levels as a precaution. The incident was 
an accident and there will be no fines, despite the large volume of sewage, said a 
spokesman for the Minnesota Pollution Control Agency. 

Source: http://minnesota.publicradio.org/display/web/2012/07/05/environment/sewage- 
spill/ 

19. July 5, WPXI 11 Pittsburgh - (Pennsylvania) 7 water main breaks reported 
overnight in several Pittsburgh neighborhoods. Crews worked to fix seven water 
main breaks around the Pittsburgh area July 5. Officials said a 12-inch line broke in 
front of a post office on Chartiers Avenue in McKees Rocks. Firefighters had to close 
the busy stretch of road down while water workers dug up the road to repair the line. 
Another break was reported in Stowe Township; a 6-inch line broke affecting 20 
homes. WPXI 11 Pittsburgh said breaks were also reported in Ross Township and Ben 
Avon Heights. West View Water Authority officials said the heat is likely playing a 
part, because the ground expands and contracts in extreme weather conditions. 

Source: http://www.wpxi.com/news/news/local/7-water-main-breaks-reported- 
overnight-several-pit/nPm2W/ 

For another story, see item 2 
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Public Health and Healthcare Sector 



20. July 6, KAJ 18 Kalispell - (Montana) Care violations shut down Broadwater 
nursing home. The Montana Department of Health and Human Services said the 
Broadwater Health Center in Townsend was providing substandard care to its residents 
and that all the residents living at the facility must find a new place to live by July 8. 
Officials listed numerous deficiencies in an 80-page report released July 5. One error 
showed the health center failed to notify doctors of elevated blood pressure, missed 
doses of medicine, and low heart rates. The State confirmed it revoked the nursing 
home’s license and in a letter to the administrator of the Broadwater Health Center, the 
U.S. Department of Health and Human Services said it was immediately terminating 
Medicare and Medicaid payments because they found the deficiencies were widespread 
and placed residents’ safety in immediate jeopardy. 

Source: http://www.kail8.com/news/care-violations-shut-down-broadwater-nursing- 
home/ 



21. July 5, Global Security Newswire - (National) U.S. allots $971 million in medical 
readiness aid. The Center for Infectious Disease Research and Policy reported that the 
U.S. Health and Human Services Department July 2 said it would provide $971 million 
in medical readiness funding to States and jurisdictions. The amount includes $619 
million for distribution under the Public Health Emergency Preparedness cooperative 
agreement, a marginal funding boost for the effort overseen by the U.S. Centers for 
Disease Control and Prevention. An additional $352 million is slated for distribution 
under the Hospital Preparedness Program, which aims to help States, territories, and 
local jurisdictions ready hospitals to handle an influx of patients following a planned or 
natural disease outbreak. The initiative received the same level of funding in 201 1. 
Federal offices have been moving to improve coordination between the two funding 
initiatives, according to an HHS statement. 

Source: http://www.nti.org/gsn/article/us-disperse-971-million-medical-readiness-aid/ 
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Government Facilities Sector 



22. July 6, Portland Press Herald - (Maine) Three homemade bombs explode in 
Winslow. The State of Maine’s Fire Marshal’s Office is investigating 3 consecutive 
days of small fires involving homemade fire bombs in Winslow, Maine, the week of 
July 2. Police roped off a parking lot July 5 at Winslow Junior High School so 
investigators could comb the scene of the latest incident. The device was made from an 
aerosol can and a carbon-dioxide canister, said a supervisor with the State Fire 
Marshal’s Office. “We’re trying to figure out what it is,” he said. “The components and 
the way they’re constructed are a little unconventional. It is something we have to work 
at.” The investigator said two other devices had burned in Winslow in recent days at 
street corners. The fire supervisor said the three incidents, which took place within 
2,000 feet of each other, could be related. 
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Source: http://www.pressherald.com/news/Fire-bomb-blazes-in-Winslow-under- 
investigation.html 



[ Return to top ] 

Emergency Services Sector 

23. July 6, WRC 4 Washington, D.C. - (Maryland) Suspect steals police car after 
shootout. A police-involved shooting left one man in the hospital and several Prince 
George’s County, Maryland police cruisers damaged July 6. Police said it started late 
July 5 in College Park, just off the campus of the University of Maryland. They 
responded to reports of gunshots, and when they arrived found a man wielding a gun. 
The man and police exchanged gunfire, and the suspect was hit many times. Witnesses 
said police put the man in the back of a cruiser. Somehow, he was able to get into the 
driver’s seat and speed off down Route 1 before crashing into a wall in front a 
McDonald’s. Several other police cars then swarmed the suspect, pinning him in, and 
ultimately placing him back in custody. The suspect was then taken to a nearby hospital 
where he was recovering from non-life threatening injuries. Police shut down Route 1 
for several hours to investigate and reopened it early July 6. 

Source: http://www.nbcwashington.com/news/local/Suspect-Steals-Police-Car-after- 
Shootout- 161 548605 .html 

24. July 5, Charleston Daily Mail - (West Virginia) Metro 911 Center down following 
lightning strike. The Ned Chilton Metro 911 Center in Charleston, West Virginia, was 
struck by lightning July 5 — an event that forced officials to reroute calls to the 
Kanawha County Emergency Ambulance Authority (KCEAA). The building sustained 
a direct hit when a strong storm moved through the area, the county manager said. The 
strike knocked out telephone lines and radio communications with emergency 
responders. Officials called the KCEAA on cell phones, instructing workers there to 
begin taking 9-1-1 calls, she said. Dispatchers were also sent to the authority’s offices 
to help take calls. Officials at the 9-1-1 center were still assessing the damage. Frontier 
Communications personnel were there July 5 trying to get the phones working again. 
Officials found some computer consoles were damaged, the commission president said. 
One of the emergency generators also sustained some damage, he said. 

Source: http://www.dailYmail.com/News/Kanawha/201207050108 
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Information Technology Sector 

25. July 6, H Security - (International) Pidgin IM client update fixes buffer overflow 
vulnerability. A new update, version 2.10.5, to the open source Pidgin instant 
messaging program was released, closing an important security hole. Previous versions 
of Pidgin contained a vulnerability in the MXit component, where parsing incoming 
messages with inline images led to a buffer overflow. The developers said this could 
have been exploited by an attacker to execute arbitrary code on a victim’s system by 
using a specially crafted message. 
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Source: http://www.h-online.com/securitv/news/item/Pidgin-IM-client-update-fixes- 
buffer-overflow-vulnerabilitv-1633702.html 



26. July 6, H Security - (International) DoS vulnerabilities in Asterisk closed. The 
Asterisk developers fixed two denial-of-service (DoS) problems in their open source 
PBX system. The bugs in the invite and voice-mail areas of the application were 
addressed by the release of Asterisk versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2- 
digiumphones. In one case, attackers are able to inhibit the Asterisk server by using all 
available RTP (Real-time Transport Protocol) ports, which leads to a DoS situation. In 
the vulnerable version of the software, if Asterisk sends a re-invite to a call over the 
SIP protocol and an endpoint responds with a provisional reply but never sends the 
final response, the RTP ports for the call will not be released. If this is repeated often 
enough, the server will run out of RTP ports and then cannot receive any incoming 
calls. The other bug is located in Asterisk’s voice-mail system. If two parties 
simultaneously manipulate the same voice-mail account, this can cause a condition 
where memory is freed twice and the server crashes. 

Source: http://www.h-online.com/security/news/item/DoS-vulnerabilities-in-Asterisk- 
closed-1633600.html 



27. July 6, H Security - (International) Microsoft’s July Patch Tuesday will close 16 
holes. Microsoft announced that July 10, the July Patch day, it will issue 9 security 
updates closing 16 holes in Windows (XP SP3 and later), Office, Internet Explorer, 
Visual Basic for Applications, and SharePoint Server. Three updates address critical 
holes in Windows, one of which also affects Internet Explorer. Mac users should also 
be aware that one of the updates affects Office 2011 for Mac. 

Source: http://www.h-online.com/security/news/item/Microsoft-s-Julv-Patch-Tuesdav- 
will-close-16-holes-1633952.html 



28. July 5, H Security - (International) Double security for Flash under Linux. Chrome 
version 20 represents a major step forward for the security of the Google browser, 
especially for Linux users. It introduces a new sandbox concept that regulates and 
filters the system calls a process is able to make. In terms of security, the Linux version 
has, until now, been neglected by Chrome, having failed to benefit from many of the 
browser’s security features. Features such as restricting hazardous plugins like Flash to 
a secure sandbox were largely reserved for the Windows versions. In February, Google 
introduced Pepper Flash for 64-bit Linux, which isolates the plug-in process within a 
chroot environment, and blocks communication with other processes. The recently 
released Chrome 20 now adds a seccomp sandbox. According to a Google developer, 
Chrome 20’s native 64-bit Flash plugin is, at least in the current Ubuntu 12.04, isolated 
within a seccomp sandbox. It thus complements the Pepper Flash sandbox. Because the 
Windows sandbox essentially relies on the integrity levels introduced in Vista and 
therefore permits processes to read whatever they like, the doubled-up Linux sandbox 
is probably currently the safest method for executing Flash content in a browser. 
Source: http://www.h-online.com/security/news/item/Double-security-for-Flash-under- 
Linux-1632632.html 
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29. July 5, Krebs on Security - (International) New Java exploit to debut in BlackHole 
exploit kits. Malicious computer code that leverages a newly-patched security flaw in 
Oracle’s Java software was set to be deployed late the week of July 2 to cyber criminal 
operations powered by the BlackHole exploit pack. The attack may be related to an 
exploit published for CVE-2012-1723 in mid- June. However, according to the current 
vendor of the BlackHole exploit pack, the exact exploit for this vulnerability has only 
been shared and used privately to date. The BlackHole author said the new Java attack 
was to be included in a software update made available July 8 to all paying and 
licensed users of BlackHole. 

Source: http://krebsonsecuritv.com/2012/07/new-iava-exploit-to-debut-in-blackhole- 
exploit-kits/ 

30. July 5, IDG News Service - (International) Google says spam not coming from 
Android botnets. July 5, Google dismissed the possibility that a new wave of 
pharmacy, penny stock, and e-card spam e-mails were being sent by Android spam 
botnets. “Our analysis suggests that spammers are using infected computers and a fake 
mobile signature to try to bypass anti-spam mechanisms in the email platform they’re 
using,” a Google spokesman said in response to security researchers from Microsoft 
and antivirus firm Sophos who first identified what they believed to be the work of an 
Android botnet. The researchers do not have a copy of the Android malware 
responsible for this spam campaign, but there is indirect evidence that suggests the e- 
mails are being sent from Android devices. Not all security researchers are convinced 
by the evidence found so far. 

Source: 

http://www.computerworld.eom/s/article/9228826/Google says spam not coming fro 

m_Android_botnets 



31. July 4, H Security - (International) John the Ripper now able to crack office files 
and use GPUs. The recently released version 1.7.9-jumbo-6 of the John the Ripper 
password cracker sees significant format support enhancements. The open source tool 
is now able to crack password-protected office documents (Office 2007/2010 and 
OpenDocument) and Firefox, Thunderbird, and SeaMonkey master passwords, as well 
as WPA-PSK keys and Mac OS X keychains. It can also request to use GPUs via 
CUDA and OpenCL. The suffix “jumbo” appears to be intended literally — more than 
40,000 lines of code were added in the 6 months since the previous release. Developer 
Solar Designer told The H’s associates at heise Security that, in developing GPU 
support, the focus was on modem functions that can be slow to calculate, such as 
WPA-PSK and Unix password hashes. For some functions, such as Ubuntu’s standard 
hash function (sha512crypt) and the time-consuming berypt, there were, according to 
the developers, no crackers with GPU support until now, “because others were unhappy 
about releasing a tool with ‘non-impressive’ speed numbers, even if this is desirable in 
practice.” 

Source: http://www.h-online.com/security/news/item/John-the-Ripper-now-able-to- 
crack-office-files-and-use-GPUs-1631901.html 



32. July 4, V3.co.uk - (International) Android malware pandemic set to intensify 
through 2012. The number of cyber attacks targeting Android mobile devices is far 
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higher than initially predicted, according to security firm Trend Micro. The company 
reported detecting 25,000 Android malware samples in the second quarter of 2012, 
more than double the 11,000 it predicted for the period, and 4 times greater than the 
6,000 found in the first quarter. Trend Micro predicted the boom seen so far will 
accelerate further as the year progresses. It estimates there will be around 38,000 
malicious samples in the third quarter of 2012, and 129,000 in the fourth quarter. Trend 
also reported 17 malicious apps were downloaded more than 700,000 times from the 
Google Play store. Two of these included fake versions of popular sports game apps, 
suggesting the firm’s Bouncer tool is proving inadequate at detecting numerous rogue 
applications. 

Source: http://www.v3.co.uk/v3-uk/news/2189268/android-malware-pandemic-set- 
intensify-2012 
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To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert. gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



33. July 6, Associated Press - (North Carolina) Damaged communications tower down 
in Smithfield. A 180-foot communications tower damaged by wind in Smithfield, 
North Carolina, was dismantled and about a dozen residents were allowed to return 
home, the Associated Press reported July 6. A tower near the intersections of U.S. 
Highways 70 and 301 was damaged by high winds July 5. Authorities said a cable on 
the tower snapped, leaving the tower swaying when firefighters arrived. The fire 
captain said crews dismantled the tower in 30-foot segments to get it safely on the 
ground early July 6. A fast food restaurant was allowed to open early July 6, and the 
evacuated residents were told it was safe to go home. 

Source: http://www.wbtv.com/story/18963344/damaged-communications-tower-down- 
in-smithfield 



34. July 6, Salem Today’s Sunbeam - (New Jersey) Thieves take advantage of storm by 
stealing from victims in Salem County. Thieves took advantage of a storm the 
weekend of June 30 by stealing from its victims in Salem County, New Jersey, 
authorities said July 5. The storm swept through the county early June 30 ripping down 
trees and power lines and leaving thousands without power. According to police, two 
large, industrial-size generators were stolen from a Comcast location July 1. The same 
day, police received reports that some people were involved in trying to steal downed 
utility cable. According to police, the individuals were supposedly cutting the downed 
wire and coiling it up, apparently hoping to sell it for scrap. Police added that it was 
dangerous because wires could still be live. 
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Source: http://www.ni.com/sunbeam- 

news/index.ssf/2012/07/thieves take advantage of stor.html 
For more stories, see items 25 , 26 , 30, and 32 
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Commercial Facilities Sector 



35. July 6, Associated Press - (Virginia) 4-alarm fire in Prince William County 
displaces about 100 residents; cause under investigation. Prince William County, 
Virginia, authorities said nearly 100 residents were displaced by a four- alarm fire at an 
apartment building in Woodbridge July 5. The fire spread to an adjoining building and 
was finally brought under control about 10 p.m. Officials said 25 residential units were 
damaged and about 94 people were displaced. Three firefighters were treated for heat- 
related illnesses. 

Source: http://www.washingtonpost.com/local/4-alarm-fire-in-prince-william-countv- 
displaces-about-lOO-residents-cause-under- 
investigation/2012/07/06/gJQASwtTRW story.html 

36. July 6, WJHG 7 Panama City - (Florida) Chemical leak sends one to the 
hospital. Emergency crews rushed July 5 to the Edgewater Beach Resort in Panama 
City Beach, Florida, after getting reports of a chemical leak at the main pool. At least 
three people were exposed to the toxic gas. They evacuated everyone from the pool 
area. Paramedics rushed one person to the hospital; they treated the other two on scene. 
The source of the toxic gas came from the pool’s pump station. Edgewater staff 
members said they were mixing acid with chlorine, what they said is a normal pool 
maintenance procedure, when for an unknown reason it produced the toxic material. 
The pool remained closed for about an hour and a half as officials worked to 
decontaminate the scene. 

Source: 

http://www.wihg.com/home/headlines/Chemical Leak Sends One to the Hospital 
161516255.html 



37. July 5, Trenton Times - (New Jersey) Trenton 12-story senior apartment building 
fire forces evacuation of 200 residents. Trenton, New Jersey firefighters evacuated 
about 200 senior citizens from a fire in a 12-story high-rise, the Trenton Times reported 
July 5. The fire began late July 4 and damaged the building’s electrical system and left 
the building without air conditioning and posed an electrical hazard. The fire at Luther 
Towers was first reported in the basement. Units went to work in the basement 
mechanical room extinguishing the fire that was caused by an electrical short. 
Firefighters were unaware the short had also compromised the 30,000- volt main line 
carrying current into the building. Water from the hoses fell on the shorted line, causing 
it to arc. Sparks exploded from the line, and the firefighters were driven out of the 
basement. With all the water on the floor and a live main power line, the basement 
became “energized,” meaning physical contact could have led to electrocution. 
Authorities had to turn off the power while residents were evacuated. 
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Source: 

http://www.ni.com/mercer/index.ssf/2012/07/trenton firefighters battle he l.html 

38. July 5, Associated Press - (Illinois) Heat possible cause in aquarium power 
outage. Searing heat may have knocked out the electricity at a popular Chicago 
aquarium temporarily, forcing it to close July 5. A spokeswoman for Shedd Aquarium 
said the power went out as temperatures in the city soared above 100 degrees. Shedd 
officials said it will take time to determine if sweltering heat outside or something else 
was the primary cause. Officials said emergency generators immediately kicked in. As 
a precaution, several hundred visitors were asked to leave and the aquarium closed for 
the day. It was expected to reopen July 6. Another spokesman said the outage occurred 
in parts of the building featuring thousands of fish and other aquatic animals. 

Source: http://www.cbsnews.com/8301-505245 1 62-57467 122/heat-possible-cause-in- 
aquarium-power-outage/ 

For more stories, see items 23 and 33 
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National Monuments and Icons Sector 



39. July 6, CNN - (Tennessee) Crews search Smoky Mountain wilderness after deadly 
storm. Search crews fanned out across the backcountry of the Great Smoky Mountains 
National Park July 6, hours after severe thunderstorms swept through east Tennessee, 
killing two people and injuring eight, park officials said. An unknown number of hikers 
and campers may have weathered the July 5 storm on the dozens of trails and camping 
sites in the most hard-hit portion of the park, a park spokesman said. Hundreds, perhaps 
thousands, of people were visiting the nation’s most- visited national park when the 
storms hit. Forty miles of roads in the park remained closed July 6 due to downed trees, 
he said. Authorities were working to evacuate campers who survived the storm without 
injury but were stranded by fallen trees. Park officials said one man died in a 
motorcycle accident, while a woman was killed in a separate incident when a tree fell 
on her. The area near Cades Cove was one of the hardest hit by the storm. The area, 
which is accessible by only one road, remained closed to visitors July 6. 

Source: http://www.cnn.com/2012/07/Q6/us/tennessee-park- 
storm/index.html?hpt=hp t2 

40. July 6, Associated Press - (Wyoming) Squirrel Creek fire determined to be human- 
caused. Fire officials said the nearly 17-square-mile Squirrel Creek Fire about 30 miles 
southwest of Laramie, Wyoming, was human-caused. The fire was 55 percent 
contained July 5. Fire managers hope to fully contain it by July 7. Fifteen homes were 
evacuated July 4 because the fire grew to the southeast in beetle-killed timber. 
However, rain fell at the fire, and crews made progress against the fire overnight. 
Residents previously evacuated on the east side of the fire were able to return home 
July 4. Air Force C-130 cargo planes were used to drop slurry on the fire, which 
destroyed one home and three outbuildings. 
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Source: http://www.laramieboomerang.com/articles/2012/07/06/ap-state- 
wy/wy Wyoming wildfires.txt 

41. July 6, Associated Press - (National) Western wildfire crews helped by moderating 
weather. Firefighters around the western side of the United States took advantage of 
moderating conditions to make inroads against wildfires that destroyed homes, forced 
residents to evacuate, and burned hundreds of thousands of acres of timber and brush. 
However, a new wildfire near Redding, California, was causing problems July 6, just 
hours after it was spotted and quickly grew to 1,200 acres. Authorities said the fire was 
threatening dozens of homes and forced evacuations. In Colorado, crews expected to 
fully contain the State’s most destructive wildfire July 6. Colorado Springs officials 
lifted evacuation orders for 126 more homes at the 28-square-mile Waldo Canyon fire, 
which damaged or destroyed nearly 350 homes and killed 2 people. Authorities said 
July 5 that they know where the fire started but did not disclose the location. In 
Wyoming and Montana July 5, firefighters took advantage of a lull in heat and shifting 
winds to attack wildfires. In southeastern Montana, more than 1,300 personnel took 
advantage of calm winds and temperatures in the 80s to make headway on five fires 
that officials were managing as one 480-square-mile wildfire complex so they could 
quickly deploy resources among the fires. In Utah, rain and cooler temperatures helped 
crews hold fire lines on the 8,200-acre Shingle fire. The fire threatened 550 cabins and 
summer homes in Dixie National Forest. 

Source: http://www.huffingtonpost.com/2012/07/06/western-wildfires-2012- 
weather n 1653353.html 



T Return to top ] 



Dams Sector 



42. July 5, Toronto Globe and Mail - (International) Lucky break saves dam in 
Kootenays from failure and toxic Salmo spill. During a voluntary, scheduled dam 
inspection July 3, Regional District of Central Kootenay officials discovered a 
damaged retaining wall seeping water from a mine tailings pond on the HB Mine 
property in Vancouver, British Columbia, Canada. Undetected, it could have spilled 
toxins into the Salmo River. If the retaining wall damage had not been detected and 
rain continued for 2 or 3 more days, the problem could have been much worse, an 
environmental technologist said. Emergency workers were on site since the breach was 
discovered and were trying to rein in the damage, officials said. Four pumps were 
removing excess water from the pond and redirecting it through a drainage ditch and 
into the Salmo River. The water is not contaminated since the tailings do not dissolve 
in water and sit at the bottom of the pond. 

Source: http://www.theglobeandmail.com/news/british-columbia/lucky-break-saves- 
dam-in-kootenays-from-failure-and-toxic-salmo-spill/article4393821/?cmpid=rssl 

43. July 5, Associated Press - (Iowa) FEMA reverses decisions on Lake Delhi. The 
Federal Emergency Management Agency (FEMA) reversed course on earlier decisions 
dealing with Lake Delhi, in Des Moines, Iowa, which was nearly drained after a dam 
failed in 2010. State officials said July 5 that the FEMA approved the State’s appeal of 
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its decision denying federal money to help rebuild the dam. Iowa Homeland Security 
and Emergency Management said the State is now eligible to apply for funding. 
Source: http://www.thonline.com/news/tri-state/article 9f2bc45e-c6f4-llel-813f- 



0019bb30f31a.html 



44. July 5, Associated Press - (Alaska) Mendenhall rising because of glacial dam 

release. KINY 800 Juneau said the National Weather Service issued a flood watch for 
Mendenhall Lake and Mendenhall River in Juneau, Alaska through July 6. The rising 
water is due to a glacial dam release in the vicinity of Suicide Basin. The Civil Air 
Patrol confirmed the filling of the Suicide Basin Glacier Dam in a recent flight. 
Source: 

http://www.therepublic.com/view/storv/c57df5e729c34a42a3390523c674fbd2/AK— 
Mendenhall-Flood-W atch 
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